@@ -114,16 +114,34 @@ def create(
114114
115115 ecs_fallback: Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
116116
117- maximum_cache_ttl: Maximum DNS cache TTL This setting sets an upper bound on DNS TTLs for purposes
118- of caching between DNS Firewall and the upstream servers. Higher TTLs will be
119- decreased to the maximum defined here for caching purposes.
117+ maximum_cache_ttl: By default, Cloudflare attempts to cache responses for as long as indicated by
118+ the TTL received from upstream nameservers. This setting sets an upper bound on
119+ this duration. For caching purposes, higher TTLs will be decreased to the
120+ maximum value defined by this setting.
120121
121- minimum_cache_ttl: Minimum DNS cache TTL This setting sets a lower bound on DNS TTLs for purposes
122- of caching between DNS Firewall and the upstream servers. Lower TTLs will be
123- increased to the minimum defined here for caching purposes .
122+ This setting does not affect the TTL value in the DNS response Cloudflare
123+ returns to clients. Cloudflare will always forward the TTL value received from
124+ upstream nameservers .
124125
125- negative_cache_ttl: Negative DNS cache TTL This setting controls how long DNS Firewall should cache
126- negative responses (e.g., NXDOMAIN) from the upstream servers.
126+ minimum_cache_ttl: By default, Cloudflare attempts to cache responses for as long as indicated by
127+ the TTL received from upstream nameservers. This setting sets a lower bound on
128+ this duration. For caching purposes, lower TTLs will be increased to the minimum
129+ value defined by this setting.
130+
131+ This setting does not affect the TTL value in the DNS response Cloudflare
132+ returns to clients. Cloudflare will always forward the TTL value received from
133+ upstream nameservers.
134+
135+ Note that, even with this setting, there is no guarantee that a response will be
136+ cached for at least the specified duration. Cached responses may be removed
137+ earlier for capacity or other operational reasons.
138+
139+ negative_cache_ttl: This setting controls how long DNS Firewall should cache negative responses
140+ (e.g., NXDOMAIN) from the upstream servers.
141+
142+ This setting does not affect the TTL value in the DNS response Cloudflare
143+ returns to clients. Cloudflare will always forward the TTL value received from
144+ upstream nameservers.
127145
128146 ratelimit: Ratelimit in queries per second per datacenter (applies to DNS queries sent to
129147 the upstream nameservers configured on the cluster)
@@ -300,18 +318,36 @@ def edit(
300318
301319 ecs_fallback: Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
302320
303- maximum_cache_ttl: Maximum DNS cache TTL This setting sets an upper bound on DNS TTLs for purposes
304- of caching between DNS Firewall and the upstream servers. Higher TTLs will be
305- decreased to the maximum defined here for caching purposes.
321+ maximum_cache_ttl: By default, Cloudflare attempts to cache responses for as long as indicated by
322+ the TTL received from upstream nameservers. This setting sets an upper bound on
323+ this duration. For caching purposes, higher TTLs will be decreased to the
324+ maximum value defined by this setting.
306325
307- minimum_cache_ttl: Minimum DNS cache TTL This setting sets a lower bound on DNS TTLs for purposes
308- of caching between DNS Firewall and the upstream servers. Lower TTLs will be
309- increased to the minimum defined here for caching purposes.
326+ This setting does not affect the TTL value in the DNS response Cloudflare
327+ returns to clients. Cloudflare will always forward the TTL value received from
328+ upstream nameservers.
329+
330+ minimum_cache_ttl: By default, Cloudflare attempts to cache responses for as long as indicated by
331+ the TTL received from upstream nameservers. This setting sets a lower bound on
332+ this duration. For caching purposes, lower TTLs will be increased to the minimum
333+ value defined by this setting.
334+
335+ This setting does not affect the TTL value in the DNS response Cloudflare
336+ returns to clients. Cloudflare will always forward the TTL value received from
337+ upstream nameservers.
338+
339+ Note that, even with this setting, there is no guarantee that a response will be
340+ cached for at least the specified duration. Cached responses may be removed
341+ earlier for capacity or other operational reasons.
310342
311343 name: DNS Firewall cluster name
312344
313- negative_cache_ttl: Negative DNS cache TTL This setting controls how long DNS Firewall should cache
314- negative responses (e.g., NXDOMAIN) from the upstream servers.
345+ negative_cache_ttl: This setting controls how long DNS Firewall should cache negative responses
346+ (e.g., NXDOMAIN) from the upstream servers.
347+
348+ This setting does not affect the TTL value in the DNS response Cloudflare
349+ returns to clients. Cloudflare will always forward the TTL value received from
350+ upstream nameservers.
315351
316352 ratelimit: Ratelimit in queries per second per datacenter (applies to DNS queries sent to
317353 the upstream nameservers configured on the cluster)
@@ -466,16 +502,34 @@ async def create(
466502
467503 ecs_fallback: Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
468504
469- maximum_cache_ttl: Maximum DNS cache TTL This setting sets an upper bound on DNS TTLs for purposes
470- of caching between DNS Firewall and the upstream servers. Higher TTLs will be
471- decreased to the maximum defined here for caching purposes.
505+ maximum_cache_ttl: By default, Cloudflare attempts to cache responses for as long as indicated by
506+ the TTL received from upstream nameservers. This setting sets an upper bound on
507+ this duration. For caching purposes, higher TTLs will be decreased to the
508+ maximum value defined by this setting.
472509
473- minimum_cache_ttl: Minimum DNS cache TTL This setting sets a lower bound on DNS TTLs for purposes
474- of caching between DNS Firewall and the upstream servers. Lower TTLs will be
475- increased to the minimum defined here for caching purposes .
510+ This setting does not affect the TTL value in the DNS response Cloudflare
511+ returns to clients. Cloudflare will always forward the TTL value received from
512+ upstream nameservers .
476513
477- negative_cache_ttl: Negative DNS cache TTL This setting controls how long DNS Firewall should cache
478- negative responses (e.g., NXDOMAIN) from the upstream servers.
514+ minimum_cache_ttl: By default, Cloudflare attempts to cache responses for as long as indicated by
515+ the TTL received from upstream nameservers. This setting sets a lower bound on
516+ this duration. For caching purposes, lower TTLs will be increased to the minimum
517+ value defined by this setting.
518+
519+ This setting does not affect the TTL value in the DNS response Cloudflare
520+ returns to clients. Cloudflare will always forward the TTL value received from
521+ upstream nameservers.
522+
523+ Note that, even with this setting, there is no guarantee that a response will be
524+ cached for at least the specified duration. Cached responses may be removed
525+ earlier for capacity or other operational reasons.
526+
527+ negative_cache_ttl: This setting controls how long DNS Firewall should cache negative responses
528+ (e.g., NXDOMAIN) from the upstream servers.
529+
530+ This setting does not affect the TTL value in the DNS response Cloudflare
531+ returns to clients. Cloudflare will always forward the TTL value received from
532+ upstream nameservers.
479533
480534 ratelimit: Ratelimit in queries per second per datacenter (applies to DNS queries sent to
481535 the upstream nameservers configured on the cluster)
@@ -652,18 +706,36 @@ async def edit(
652706
653707 ecs_fallback: Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
654708
655- maximum_cache_ttl: Maximum DNS cache TTL This setting sets an upper bound on DNS TTLs for purposes
656- of caching between DNS Firewall and the upstream servers. Higher TTLs will be
657- decreased to the maximum defined here for caching purposes.
709+ maximum_cache_ttl: By default, Cloudflare attempts to cache responses for as long as indicated by
710+ the TTL received from upstream nameservers. This setting sets an upper bound on
711+ this duration. For caching purposes, higher TTLs will be decreased to the
712+ maximum value defined by this setting.
658713
659- minimum_cache_ttl: Minimum DNS cache TTL This setting sets a lower bound on DNS TTLs for purposes
660- of caching between DNS Firewall and the upstream servers. Lower TTLs will be
661- increased to the minimum defined here for caching purposes.
714+ This setting does not affect the TTL value in the DNS response Cloudflare
715+ returns to clients. Cloudflare will always forward the TTL value received from
716+ upstream nameservers.
717+
718+ minimum_cache_ttl: By default, Cloudflare attempts to cache responses for as long as indicated by
719+ the TTL received from upstream nameservers. This setting sets a lower bound on
720+ this duration. For caching purposes, lower TTLs will be increased to the minimum
721+ value defined by this setting.
722+
723+ This setting does not affect the TTL value in the DNS response Cloudflare
724+ returns to clients. Cloudflare will always forward the TTL value received from
725+ upstream nameservers.
726+
727+ Note that, even with this setting, there is no guarantee that a response will be
728+ cached for at least the specified duration. Cached responses may be removed
729+ earlier for capacity or other operational reasons.
662730
663731 name: DNS Firewall cluster name
664732
665- negative_cache_ttl: Negative DNS cache TTL This setting controls how long DNS Firewall should cache
666- negative responses (e.g., NXDOMAIN) from the upstream servers.
733+ negative_cache_ttl: This setting controls how long DNS Firewall should cache negative responses
734+ (e.g., NXDOMAIN) from the upstream servers.
735+
736+ This setting does not affect the TTL value in the DNS response Cloudflare
737+ returns to clients. Cloudflare will always forward the TTL value received from
738+ upstream nameservers.
667739
668740 ratelimit: Ratelimit in queries per second per datacenter (applies to DNS queries sent to
669741 the upstream nameservers configured on the cluster)
0 commit comments